API Build-data JSON Resources
Theme

Choose how MSRBot.io looks on this device.

Auto (match system) Light mode Dark mode

Preference is stored in this browser only.

IETF RFC 5011
[ACTIVE]

Automated Updates of DNS Security (DNSSEC) Trust Anchors

Metadata

Publisher
IETF
Doc Type
Standard
Pages
14
Abstract
This document describes a means for automated, authenticated, and authorized updating of DNSSEC "trust anchors". The method provides protection against N-1 key compromises of N keys in the trust point key set. Based on the trust established by the presence of a current anchor, other anchors may be added at the same place in the hierarchy, and, ultimately, supplant the existing anchor(s). This mechanism will require changes to resolver management behavior (but not resolver resolution behavior), and the addition of a single flag bit to the DNSKEY record. [STANDARDS-TRACK]
Publication Date
2007-09-01
Status Note
Internet Standard
DOI
10.17487/RFC5011
Link
https://doi.org/10.17487/RFC5011
Author(s)
Michael StJohns
Latest version of IETF RFC 5011

Document Versions — IETF RFC 5011

  • ▶ IETF RFC 5011 (2007-09-01)
    THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

Bibliographic Reference(s)

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC5011.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree
Reference this Doc

Plain text (ISO 690 compliant)

Preview:
IETF RFC 5011, Automated Updates of DNS Security (DNSSEC) Trust Anchors. Available at https://doi.org/10.17487/RFC5011
Snippet:
IETF RFC 5011, Automated Updates of DNS Security (DNSSEC) Trust Anchors. Available at https://doi.org/10.17487/RFC5011

HTML (ISO 690 compliant)

Preview:
IETF RFC 5011, Automated Updates of DNS Security (DNSSEC) Trust Anchors. Available at https://doi.org/10.17487/RFC5011
Snippet:
<span class="citation"><cite>IETF RFC 5011</cite>, Automated Updates of DNS Security (DNSSEC) Trust Anchors. Available at <a href="https://doi.org/10.17487/RFC5011" target="_blank" rel="noopener">https://doi.org/10.17487/RFC5011</a></span>

SMPTE Icon SMPTE's HTML Pub

Preview:
IETF RFC 5011, Automated Updates of DNS Security (DNSSEC) Trust Anchors
doi: 10.17487/RFC5011
url: https://doi.org/10.17487/RFC5011
Snippet:
<li>
<cite id="bib-rfc5011">IETF RFC 5011</cite>, Automated Updates of DNS Security (DNSSEC) Trust Anchors
<span class="doi">10.17487/RFC5011</span>
</li>

Referenced By